$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e60c7442-6ea3-37ae-be74-ea972a1db7b5.roa File: e60c7442-6ea3-37ae-be74-ea972a1db7b5.roa (raw, json) Hash identifier: KbzLRy0EK36lXNQcazn4gDwxiG3k6bdr4KdYJ8JkVww= Subject key identifier: AB:A8:78:ED:9D:6E:4B:96:75:71:FD:A5:2C:40:FB:FF:85:BF:8D:69 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAE81B691F2BDBF9D399D9280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e60c7442-6ea3-37ae-be74-ea972a1db7b5.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 396602 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:b6:91:f2:bd:bf:9d:39:9d:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=d24defb8-14e3-4ecb-9e3c-c114f5f5daab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b7:cb:4e:2e:5e:6b:06:12:21:d2:e2:5d:1d: b8:92:27:9d:27:14:58:f2:3e:ae:51:ec:e3:18:93: 82:ba:61:a9:da:9a:4d:7d:87:77:4b:76:d1:d0:5f: 26:36:6c:d6:78:9c:e6:6b:b8:cb:fc:ce:52:a6:45: 38:35:b5:98:87:f2:c3:7a:ac:49:92:f4:d1:0d:37: ca:2a:db:f4:7b:5e:a9:9e:b0:4d:89:b8:ba:be:b1: d3:8e:c2:ae:7d:bd:89:38:c3:e6:18:e8:ee:90:dc: 02:69:4c:85:ca:d3:c3:a5:0e:64:61:d4:a0:8c:3a: e4:6c:89:c2:8b:0e:a2:c0:a5:f7:f6:f5:dc:c5:ad: 38:1d:54:1a:44:7c:c7:69:54:df:a2:e9:f8:16:9a: 61:de:b7:be:db:37:06:15:7a:cd:41:ff:88:e7:0d: cf:a6:8f:38:ae:06:a7:e0:1c:16:27:91:8c:64:1d: d2:3b:f7:42:db:89:63:ba:9e:63:84:ae:2b:98:ed: 87:3e:12:d3:0b:da:f7:41:ee:29:96:20:2c:cc:13: 10:13:5b:6d:fa:11:d7:02:f1:d6:a7:02:2b:18:ee: 7c:03:8b:0c:27:3c:ef:4c:80:b4:7a:f3:76:e9:50: bd:44:95:06:07:10:63:fa:5a:c0:33:68:ae:a8:9c: 71:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A8:78:ED:9D:6E:4B:96:75:71:FD:A5:2C:40:FB:FF:85:BF:8D:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e60c7442-6ea3-37ae-be74-ea972a1db7b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4c:04:6c:0a:bb:0d:0d:22:2a:28:6b:ef:d2:94:c0:5c:8d: cd:f2:ba:00:a0:ec:61:df:44:f8:67:18:e8:64:0d:29:4f:07: a3:cb:6e:7d:c6:d1:59:42:ed:ed:78:57:b0:63:4d:73:b2:c4: 50:17:60:bd:aa:97:d2:cc:50:fe:98:64:28:14:42:07:63:6e: 1a:eb:36:39:8f:47:4b:5a:5b:b3:c4:68:81:0f:55:b3:3a:d4: 08:7c:74:60:23:18:7c:22:24:c3:aa:63:b4:c9:dd:a8:09:36: 43:fc:2a:8e:ca:4b:e4:36:d2:dd:a4:90:22:a3:85:13:c8:39: 65:fc:ae:2c:92:51:95:39:23:ff:80:ff:fa:60:d2:ea:15:80: 17:13:0f:01:82:74:97:f4:80:67:d2:40:b1:cb:17:b1:8c:60: 20:ae:5f:12:4e:bc:70:46:55:4e:74:04:32:ab:bc:e4:9a:3a: 8e:f0:cb:14:11:1e:35:42:d4:09:c2:af:ed:a1:49:43:a0:fb: 3f:90:a4:6c:51:94:f4:d4:25:a6:8f:e8:fd:31:37:90:cc:61: de:89:9e:59:3f:54:ec:44:6f:5c:16:68:61:d3:aa:72:5f:10: e3:5f:50:55:84:fc:a2:fa:61:dd:4e:eb:52:fe:66:fd:cf:cb: 8e:2b:29:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugbaR8r2/nTmdkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk ZDI0ZGVmYjgtMTRlMy00ZWNiLTllM2MtYzExNGY1ZjVkYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77fLTi5eawYSIdLiXR24kiedJxRY8j6uUezj GJOCumGp2ppNfYd3S3bR0F8mNmzWeJzma7jL/M5SpkU4NbWYh/LDeqxJkvTRDTfK Ktv0e16pnrBNibi6vrHTjsKufb2JOMPmGOjukNwCaUyFytPDpQ5kYdSgjDrkbInC iw6iwKX39vXcxa04HVQaRHzHaVTfoun4Fpph3re+2zcGFXrNQf+I5w3Ppo84rgan 4BwWJ5GMZB3SO/dC24ljup5jhK4rmO2HPhLTC9r3Qe4pliAszBMQE1tt+hHXAvHW pwIrGO58A4sMJzzvTIC0evN26VC9RJUGBxBj+lrAM2iuqJxx+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuoeO2dbkuWdXH9pSxA+/+Fv41pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTYwYzc0NDItNmVhMy0z N2FlLWJlNzQtZWE5NzJhMWRiN2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhMBGwKuw0NIiooa+/SlMBcjc3yugCg7GHfRPhnGOhkDSlPB6PLbn3G 0VlC7e14V7BjTXOyxFAXYL2ql9LMUP6YZCgUQgdjbhrrNjmPR0taW7PEaIEPVbM6 1Ah8dGAjGHwiJMOqY7TJ3agJNkP8Ko7KS+Q20t2kkCKjhRPIOWX8riySUZU5I/+A //pg0uoVgBcTDwGCdJf0gGfSQLHLF7GMYCCuXxJOvHBGVU50BDKrvOSaOo7wyxQR HjVC1AnCr+2hSUOg+z+QpGxRlPTUJaaP6P0xN5DMYd6Jnlk/VOxEb1wWaGHTqnJf EONfUFWE/KL6Yd1O61L+Zv3Py44rKSk= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:14 2026 by rpki-client